Oh my goodness. Turns out deps_nix exists, and it obviates not only half of the hacks from yesterday, but also many, many more I’d just accepted as unavoidable, and something I’d have to build some tooling around. Well, looks like someone already has :)